SQL injection defenses - Nystrom, Marty (O'Reilly, 2007)